Adjusted

routes/admin/users.routes.js

@@ -0,0 +1,22 @@
+const express = require('express');
+const router = express.Router();
+
+const usersCtrl = require('../../controllers/admin/users.controller');
+const { sensitiveOpsLimiter } = require('../../middleware/rateLimiter.middleware');
+
+router.post('/bulk/restore', sensitiveOpsLimiter, usersCtrl.bulkRestoreUsers);
+router.delete('/bulk', sensitiveOpsLimiter, usersCtrl.bulkDeactivateUsers);
+router.get('/field-values', usersCtrl.getUserFieldValues);
+router.get('/archived', usersCtrl.getArchivedUsers);
+router.post('/staff', sensitiveOpsLimiter, usersCtrl.addStaffUser);
+router.get('/', usersCtrl.getUsers);
+router.get('/:id', usersCtrl.getUser);
+router.put('/:id', sensitiveOpsLimiter, usersCtrl.updateUser);
+router.delete('/:id', sensitiveOpsLimiter, usersCtrl.deactivateUser);
+router.post('/:id/restore', sensitiveOpsLimiter, usersCtrl.restoreUser);
+
+// ── Sessions ──────────────────────────────────────────────────────────────────
+router.get('/:id/sessions', usersCtrl.getUserSessions);
+router.delete('/:id/sessions/:sid', sensitiveOpsLimiter, usersCtrl.terminateSession);
+
+module.exports = router;